implement-saaskit-nextjs

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs the installation of the @scalekit-sdk/node package, which is the official SDK for the vendor's platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from URL search parameters. Ingestion point: The next parameter in app/auth/login/route.ts and app/auth/callback/route.ts. Boundary markers: The instructions include logic to verify redirect destinations. Capability inventory: The skill uses NextResponse.redirect and calls the Scalekit SDK to initiate authentication. Sanitization: The implementation includes a check to ensure the next parameter starts with a single / and not //, preventing Open Redirect attacks.
  • [COMMAND_EXECUTION]: The skill involves executing package installation commands for dependencies required by the authentication implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 02:19 PM
Security Audit — agent-trust-hub — implement-saaskit-nextjs